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ABSTRACT 


Title of Thesis: Economic Analysis of Provision of Reliability 
in Weapons 


Jona NN Green. Master wor Arts, 1968 


iies tod Vree hed by: Professor Allan G. Gruchy 
University of Maryland 


Robert D. Lamson 
Institute for Defense Analyses 


The problem analyzed is how to provide most efficiently in 
a weapon, in an economic sense, high reliability - defined 
as the probability of the weapon to operate properly whenever, 
within its prescribed service life, it is called upon to do So. 
Moss problems discussed am che context of a re-entry body (veapen) 
Coma Ctrarvedac missale. A method 1s proposed for building pa 
supply curve of initial (when new) reliability, using a generalized 
Lagrange multiplier method. Selection of the reliability goal 
based upon the value of the product is discussed. A model is also 
developed for maintenance of reliability in the presence of degrada- 
tion with time. The nature of this latter question 1S the acceptance 
of degradation of weapon output versus the cost of maintenance 
activities. Important parameters are examined in a cost minimiza- 
tion formulation using a standard Lagrangean format. The analysis 
is extended into subjective consideration of utility of reliability, 
and risk and uncertainty. How the analysis could be used to assist 
a weapon development agency in design and maintenance decisions 


is indicated. 
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I. BACKGROUND 


A. Nature of the Problem 


Ihe problem to be anvestigated 15 how to provide most efticiently, 
in an economic sense, a high probability of a weapon containing a 
complex functional device to operate properly whenever, within its 
prescribed service life, it is called upon to do so. We are speaking 
of explosive weapons which are only called upon to operate once. The 
time at which a weapon is used may be when almost new or after it has 
undergone a long period of storage. "Long" in this case means long 
enough that a predicted. low failure rate under a relatively benign 
Spouse cong ion Wecenes Significant in reduction ol reliability 
at the time of use. 

The intent of this thesis is to explore how the standard tools 
of economic analysis may be applied to assist in a decision process 
concerning provision of reliability which cannot properly be the 
domain of reliability and systems engineering specialists alone. 
some of the important questions to be decided in arriving at a weapon 


system of given effectiveness at least cost are: 


‘thus, already we see that the reliability definition above is 
open to ambiguous interpretation, dependent on what has been the past 
history of the weapon at the time of use. Contractors usually like 
to be held to only meeting what is called an initial (when new) or 
inherent reliability. Inherent has the broader connotation of meaning 
what the design would be capable of producing if everything in the 
production process were done perfectly. But then this reliability 1s 
stated to pertain initially, and the prediction of degradation before 
use (while it is in the hands of the using service, albeit under known 
specified procedures and environmental conditions) is a complex question 
the answer to which the contractor would not like his fee to depend 
upon. 





I. BACKGROUND 


A. Nature of the Problem 


ine problem Clo bel investigated is how ro provide moot ebricieneLy. 
in an economic sense, a high probability of a weapon containing a 
complex functional device to operate properly whenever, within its 
prescribed service life, it is called upon to do so. We are speaking 
of explosive weapons which are only called upon to operate once. The 
time at which a weapon is used may be when almost new or after it has 
undergone a long period of storage. "Long" in this case means long 
enough that a predicted. low failure rate under a relatively benign 
storage condition becomes significant in reduction of reliability 
at the time of use.> 

The intent of this thesis is to explore how the standard tools 
of economic analysis may be applied to assist in a decision process 
concerning provision of reliability which cannot properly be the 
domain of reliability and systems engineering specialists alone. 
some of the important questions to be decided in arriving at a weapon 


system of given effectiveness at least cost are: 


IThus, already we see that the reliability definition above is 
open to ambiguous interpretation, dependent on what has been the past 
history of the weapon at the time of use. Contractors usually like 
to be held to only meeting what is called an initial (when new) or 
inherent reliability. Inherent has the broader connotation of meaning 
what the design would be capable of producing if everything in the 
production process were done perfectly. But then this reliability is 
stated to pertain initially, and the prediction of degradation before 
use (while it is in the hands of the uSing service, albeit under known 
specified procedures and environmental conditions) is a complex question 
the answer to which the contractor would not like his fee to depend 
upon. 





(1) Should the design and support conc#pt be that of a "wooden 
bomb"? By wooden bomb is meant a weapon for which neither test not 
maintenance is necessary after its introduction into the operational 
inventory of a military service. Under this concept, to meet a 
reliability goal applicable after a long service life and given that 
reliability does degrade with time, one must pay the extra cost of 
development of a system with higher reliability when equipment is new. 
But there are obvious counterbalancing savings from the absence of 
test and maintenance expenses. 

(2) If periodic tests are to be conducted, what are the nature 
and frequency of the tests? The trade-off here is between the cost 
of obtaining information and the value of the information obtained. 
Decision rules are needed concerning action upon completion of test - 
continue in use, repair, or replace. 

(3) If the intended support concept is to treat the weapon like 
a wooden bomb, should allowance be made in the design for a change in 
the planned logistics sequence should the expectation of conditions 
upon which the decision was based be proved wrong in such a way as 
to impose a severe penalty for not having a test and maintenance 
activity? The question here iS analogous to whether or not to pay 
an insurance premium for possible failures during the service life - 
failures whose probability may be known much less exactly than events 
based on inSurance actuarial tables. 

(4) What should be the reliability goal of the weapon, considering 
the possibility of a repair/replace cycle or not? Altheugh the problem 
in reliability engineering, particularly from the standpoint of the 


reliability when new, has been extensively treated by sophisticated 





Ge 


optimization techniques trading off attainment of high reliability 
versus performance degradation and the costs of producing high 
reliability equipment with attendant comprehensive test programs; the 
solutions, especially in weapons for exwensive strategic missile 
Systems, have been rather trivial and arbitrary from an economic 

point of view. The worth of the weapon and supporting missile system 
Riba nao Nigheenac the reliability goal for the functional device 

in the weapon has been set very high, near the level of estimated 
feasibility with little regard for cost. But costs are expended in 

an attempt to meet the reliability specification, and in that way of 
ern De Ines there 15 not likely tô be san attempt made To Ze 
marginal cost is equated to marginal revenue. A trend toward multiple 
weapons on each missile should enhance the importance of the economic 
costs of attaining reliability relative to weapon worth since the total 
value of the system, although it may be somewhat larger, is spread over 
many more weapons, reducing the value per weapon. 

(S) Should the available design alternatives for the functional 
device, based on acceptably proved technology, be deemed unsatisfactory, 
Suggesting that a different type of device be developed for the weapon? 
Technological considerations may have dictated use of an electronic 
device of considerable series complexity. Rather than expend effort in 
raising the reliability of this design, a better alternate solution 
might be to invest in a research and development program for a device 
utilizing a different technical approach with a potential for higher 


reliability at the same or lower cost to do the same job. 





Emo lyre Rare Prediction 

Reliability of a device is usually conceptually considered 
in two different ways, dependent on whether the device must operate 
over a long period of time or is a one-time use piece of equipment. 
For an explosive mechanism usually the latter applies and a prediction 
of reliability would be based on the result of many trials of hopefully 
identical mechanisms, with reliability estimated by the number of 
Successes divided by the total number of trials. For prediction of 
reliability for devices which must operate for a finite length of 
time in order to meet the definition of mission success, the reliability 
may be predicted prior to experimental testing of the device if one 
Masas ls Lor predicting, the. robabilaty distribution Eyre 
over time. An estimation of failure rate expressed mathematically 
leads to a calculation of reliability based upon the estimate. 
Prediction of the failure rate of a complex functional device is based 
upon what is known or assumed about the failure rates of the parts 
making up the device and how these parts are assembled together. 
Electronic devices will be used for illustration in this thesis both 
because of their practical importance and their amenability to mathe- 
matical modeling and prediction of failure rates. However, it shoulda 
be remembered that the economic theory does not depend on the physical 
nature of the device. It will also be evident that the decisions of 
major economic importance are not dependent on very accurate predictions 
Or fea lure rate: 

This thesis does not dwell on the engineering aspects of the 
problem although they are of prime importance in any practical 


application. Reliability prediction procedures for electronic equipment 





have been extensively investigated. Reference [1] E is cited for 

a Comprehensive treatment of electronic design and reliability 
engineering; reference [2] for reliability engineering as related to 
maintainability and system effectiveness. Data on failure rates 

of electronic parts for predictions of equipment reliability on military 
contracts are compiled in reference B . A consistent set of terms 

and symbols will be used in this thesis, not necessarily consistent 

with that used in any of the references cited. 

The reliability of an electronic device is inversely proportional 
to series complexity, but considerable complexity may be necessary to 
obtain desired performance characteristics. Given the design concept, 
a prediction can then be made of a reliability which might be attained 
when the equipment is new. Usually in the past a prediction of failure 
rate during dormant storage has been considered too difficult to be 
done or deemed not significant. However, a recent report of a study 
based on extensive data gathering sheds more light on storage effects 
on electronic equipment and part reliability, indicating the feasibility 
of meaningful quantitative prediction 5 . If this proves to be valid 
and the dormant failure rates are ee itis Importanti iat 
weapon system planning take them into account. 

Assuming a Poisson distribution of failures over time, the 
reliability of a series system of electronic parts is expressed by 
an exponential model: 


Roses At 





Amber ng | | will refer to the list of literature cited at 
the end of the thesis. 





where 
R = reliability of the system 
e = base of natural logarithm 
A = constant failure or hazard rate under a specified set of 
cONATTEIONS 
t = time under the specified conditions. 


For a weapon we will consider a factory-to-target sequence (FTS) 
with time phases which have different associated failure rates, 
dependent on the associated environmental or use conditions, and 
whether the equipment is operating or non-operating. Thus, for each 


time period of index i, we have 


u. = basic failure rate under environmental conditions defined 
as standard 


k. = the failure rate adjustment or stress factor for a given 
use condition 


Then, 


ee 


R=e 


consistent with a failure rate addition rule of independent events. 
In this paper we will call the product for any period the hazard 


product, defined as 
Hee Ate 


Predicting the failure rate of a new configuration has Deen calf 
"a vague and imprecise process at best" | s | ». But the author of. the 
remark shows the value in estimating the uncertainty involved, and 


it follows that a meaningful estimate is bette1 than no estimate at all. 





CE (Measure «ot Effectiveness 


To do an economic analysis of a weapon system we must decide 
on a measure of effectiveness (MOE), the output of the weapon's 
production function. System effectiveness of a weapon system is 
generally considered to be a product of the following three items: 

(1) Reliability 

(2) Performance characteristics, given no failure 

(3) Availability or proportion of time ready for use. 

To consider whether we are using the proper MOE in our analysis 
we ave to talk about "suboptimization and proximate Criteria. Vinee 
are discussed in Chapter 2 of reference [6] in relation to the 
manufacturing industry. The same principles apply to our production 
of reliability in a weapon. It is brought out that a manufacturing 
department for practical reasons may have to optimize at its own 
level although ideally the problems should be solved according to the 
purpose of the over-all organization. The criterion a department 
uses which is not explicitly linked to over-all objectives is labeled 
a proximate criterion. The proximate criterion should be consistent 
with -d Good Criterion at a higher leyel. It is clear then that 
reliability of a weapon is only a proximate criterion. In fact, 
effectiveness of the weapon based on the three items above is not 
an overall criterion if the weapon is only a part of the weapon 
system. We must be careful when using a proximate criterion such 
as reliability of a weapon to take account of the interaction of our 
activities to increase reliability on the other elements of the MOE. 

In this thesis which will primarily for illustrative purposes 
consider the reliability of weapons in the context of a strategic 


missile system, the use of the effectiveness of the weapon deployed 





by the wmmissilesdssa proximate criterion for the sirectivenésy imi 
the entire missile system seems reasonable in making decisions Goncerning 
design of the carried weapon. The weapon containing a complex functional 
device for causing its detonation at the proper time in the trajectory 
will be called the re-entry body (REB). Since the rest of the missile 
system will in general involve more complex functions than the REB 
(for example, propulsion and guidance), we can in looking at sub- 
optimization of the effectiveness of the REB disregard explicit use 
aliens avellabilaty term.. That as, avallability of the REB val pe 
maintained at 100% of missile carrying capability, utilizing scheduled 
down time of the missile to accomplish any planned maintenance of 
the REB. (This does not say we should not worry about non-availability 
of REB's which might result from unexpected deficiencies in design 
which are subsequently brought to light by some testing program.) 
The extra REB's necessary to allow a planned level of maintenance which 
might reduce their availability in the ordinary sense of the word 
would appear in increased costs of procurement - not in reduction 
of effectiveness. 

The above treatment of availability might seem to be untrue for 
tactical weapons as opposed to strategic ones, but in some cases 
it would be quite similar. Although in theory resupply of weapons 
can take place, a given battle is usually fought with what is on 
hand. For example, if we consider a shipboard surface-to-air missil 
(SAM) for fleet air defense, only a given number can be available 
on board for any engagement. Effectiveness during any battle is 
only reduced by the availability term if the maintenance concept 


calls for testing the functional devices on board for a decisión as 





ter the condition. MEN Or Without" provision for -repaiyson board af 
condition is deemed bad. If the concept calls for issuance to the 
fleet of a "wooden round" (completely assembled SAM with no further 
tests called for), availability on board will be 100% with effectiveness 
reduced only if this concept results in lowered reiiability. 

The REB influences on performance to be considered are those 
which affect explosive yield of the contained warhead and accuracy on 
target. Anything which increases weight and volume of the functional 
device detracts from yield, due to robbing space and weight allocation 
for the warhead. It also detracts from accuracy because it restricts 


design options for the REB. 


D, Andlogy with Economic Theory 


Since the stated intent is to apply standard tools ot economic 
analysis to the problem, the analogy between a supply of reliability 
and a more usual economic good will be pointed out here. 

in building up-a supply curve of reliability from cost curves 
we Gan relate to the classic article by Viner | 7| when LPedbed 
the supply curve of firms as dependent upon different types of 
technological and pecuniary cost situations under the assumption of 
atomistic competition. His stated purpose of presenting formal typ=5 
of relationships which could be conceived to exist under certain 
Simplifying assumptions to help answer the question - Which cost 
curve is the proper supply curve? - is a valid objective he. Wher 
Viner speaks of a firm within an industry producing a product. we 
will consider the processes or activities within the entire set of 


productive services which combine to supply units of weapon re 11:b111ty 





(looked upon as an increase of weapon reliability, SR, above sume 


Basic level because reliability must 


refer to some specific design). 


Where Viner speaks of price of product, we will use the value of 


unit AR. 
the average and marginal cost curves 


of product. The practical nature of 


The items of interest will be the increasing portions of 


and how they relate to price 


the pecuniary and technological 


cost situations of improving reliability puts one immediately into an 


area of increasing average costs, which is probably implicitly recognized 


by the development agencies. But do 


they consider the much higher 


marginal cost which should be examined for intersection with the 


price level to determine the quantity of SR produced? 


The average and marginal costs are of course derived from the 


Rola cost function: 


The factors which lie behind the total cost 


ame ion ın the theory of the firm in relation Co production derer 1ong 


and the utilization of resources are 


reference BE (1) 


Scare lig aw Ven: 
relates outputs to inputs, 


(3) the assumption that profit is to 


discussed in Chapter 7 of 


a production function which 


(2) prices of proquet ana anpieere ond 


be maximized subject to the 


constraint of the proJuction function; nine theorems are derived which 


correspond to the rules of standard marginal economic analysis. 


our case the single output is AR of 
er zvaraıous actavicios Tor which tne 
Into monetary terms. In this Format 
je money. [For optimal decisions one 
the marginal product per dollar cost 


eun marginal Ripper dorlar Cost 


process snoulea be equal’, 


Another theorem proved states that 


In 


the weapon. The inputs are 
cost of each will be translated 
the only resource to be allocated 
of the theorems proved is that 
is equal for every input. That 
of each reliability Improvement 


any 





JE 


output will be produced such that its Selling price equals marginal anat. 
This corresponds to the price (value) of unit AR determining the level 
MAR so Chat marginal cost-of AR does equal price. Similar analogy can 
be made with the other theorems. 

Two concepts from price theory, both discussed in Chapter 7 of 
reference [o] should be introduced - opportunity costs and external dis- 
eeo neS “Opportunity cost for producing a given amount of product is 
the amount of another product which could have been produced with the 
given marginal amount of input. We will use the term to indicate the 
amount of another performance aspect which would have been obtained if we 
had not spent a given amount on AR. Viewed another way, consideration of 
Ene costs Involving the overall MOE versus. the costs when considering 
-eliability alone corresponds to a social cost versus an individual 
industry cost. We can put these costs in monetary terms if we can place 
a value on the various performance aspects. Secondly, external diseconomie®’ 
ma ar le Irom expansion of output overall. In. production theory ad 
monetary diseconomy pertains if the price of inputs rise or a technological 
diseconomy pertains if average costs rise for other reasons. In our case 
the primary reason for an individual reliability effort to be more 
expensive as the aggregate effort rises is the limited am-unt ct AR pussible. 
Even, Mot directly agnt biering àn their attainment Of ebjeerivyees the 
impact of the activitins accentuates the importance of diminishing returns 


CE ability co be gair Approaches zero.” 





in the reliability improvement problem direct anelogy with -pp-rtunity 
costs and external disec momies of standard productior theory 15 seompwheat 
strained. The two cone_pts might more properly be lumpec t*g ther ari 
Called "external ef&scts"; that eg activities to impmwe Milgability 
have effects on other item: of the ultimate MOE in addition ta th-ir 
effects on each other. It is even conceivable that these effect= could 


be so large in a negative direction that the relation between reliability 
and weapon system effectiven:ss would not be a monotenically increasing 
function. In this thesiesthescosts from these external @etigects wifl De 


Called opportunity co®t. , but it should be noted that there is nat an 
exact parallel ty the §ppertunity costs of standard scaySmic anglfysis. 





The processes or activities of the development agency tc improve 
weapon reliability, which relate to the productive services of a firm, 
will be categorized as follows: 

(1) Functional Design 

(a) Reduction of complexity 
(b) Redundancy 
(c) Improvement of insensitivity to parameter changes 
(d) Provisions for test in field 
(2) Packaging 
(a) Provisions for integrated test in manufacture 
(b) Accessibility for test and repair/replace in field 
(c) Environmental stress protection 


(3)> Manufacturing and Quality Control 


(a) Use of high reliability parts 
(D) Process control and testing of weapon 


(4) Operational Procedures 


(a) Test and repair/replace cycle 
Cga on ot stress. faccors 


Wiese activities are chosen to relate primarily to the expected: rea DLYA 
of the weapon rather than to the confidence with which that reliability 
is predicted although the two aspects are intimately related. For 
instance, the activities under item (3) above involve quantities of 
tests, many of which will be determined by statistical confidence limits 
based on some assumption of probability distribution of attributes. 

But the primary purpose of the activity is to increase expected 
reliability in the ultimate use. We have not included operatibnal 

fesies (OT) las da Category — the OF being 2 near as-Tull-seale test 

as possible under as near actual use conditions as possible - the real 
purpose not being to improve reliability of the weapon but tc increas: 
confidence that the assumptions which led to the predicted reliability 
were correct. That is, the OT does not just increase statistical 


confidence in the ordinary sense although every sample contribute:. 





but it gives qualitative confidence that the lower level test programs 
were testing piece-meal the proper attributes to insure over-all 
success in an operational mission. (The Operational Procedures test 
category, 4a above, refers to a test or monitoring operation on the 
functional device in the field with the explicit intent of discovering 
and correcting bad devices before use.) Nor have we included a stock- 
pile sampling program (SSP) which would make thorough, intensive 
investigations (usually destructive tests) of small samples from the 
operational inventory. The SSP also makes a small contribution to 

Be a stica contidence Of reliability, Dut -it primarily vould 
forewarn of an impending degradation of reliability. As such an SSP 
has no effect on reliability unless further action is taken based upon 
the information provided. 

Now, having indicated that we will consider the activities 
primarily in terms of expected reliabilities, we will find it necessary 
to extend the analysis into a more subjective area in order to make 
final common sense decisions. The two major categories, both widely 
used in economic theory, are: 

(1) Risk, Uncertainty and Profit 

(405 WhevGnivaryeinalveroue, Choiçes Ivo lv ing Risk 
me first category is the-title of the 1921 book by Knight analyzing 
profit theory from largely a macroeconomic point of view, but Chapter 
7 of which is pertinent here in its discussion of the meaning of 
risk and uncertainty [10] . The second is the title of a 1948 article 
by Friedman and Savage which describes utility functions of individual: 
for the purpose of explaining behavior under the postulate of maximi- 


222. 101008 expected URL it [3] . The pertinent portion therein is 
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the shape of the utility function of one who will pay a premium to 
avoid a large loss. We will turn the argument around; rather than 
explaining behavior, we will indicate what the rational behavior of 
the development agency should be (design decision alternatives) based 
upon an assumption of at least the gross shape of the ultimate user's 
utility function for the product. The above two references and many 
others are cited in the 1965 study by Fellner of economic behavior 
along Bayesian lines ES . We will use only a few of the ideas from 
this large field of decision making under uncertainty in an attempt 
to have our profit maximization make sense in accordance with utility 
theory and in the presence of subjective probability. 

Next let us define terms for use in this thesis (which as in 
reliability theory cannot be consistent with all the references) and 
indicate the relation to the particular subject. Risk applies where 
the probability of an event can be calculated in terms of a standard 
Process (heads or tails type) even though the values assigned to che 
Standard process may be somewhat subjective. Basically, risk is 
calculated by frequentist methnds - observing an event many times 
eemerelacing probebility to observed! Frequency... le Secms logreal 
then to put failure rate prediction for electronic devices into the 
category. 7 [Even though. the particular device has not yer even 
Bee built, the reliabilaty calculations are based om picce perl 
experience with failure rates derived by frequency methods. Uncertainty, 
on the other hand, applies where a method of calculation of probability 
of an event is less clear - sometimes said to be a case of n» theory 
for calculation. But the subjectivist approach allows for appraisal 


of probability values and using them to inject judgment of this nature 





I = 
12 


in the decision process. We will use uncertainty td apply to the 
appraisal of failure modes which would result in reliability values 
beyond the scope of which the mathematical models will predict. For 
example, developers of complex functional devices for weapons where 
the specification for reliability is well above 90% will never show 
a mathematical model for a meaningful prediction of the probability 
of achieving only 20%. But we know that such things, verging on 
catastrophic in terms of mission success for the weapon system, have 
happened; and people with experience Can be expected to make meaningful 
appraisals of the likelihood of such happenings. If one recognizes 
the appraisal of the probability of unpredicted failure modes, the 
result may be a decision to select alternatives which entail real 
and opportunity costs (buying insurance) to make it less costly to 
correct unsuspected defects should they occur. 

Essentially then we can list three levels of refinement in 
ma amaizing bie profit. rom reliability oróvision acctivicnes: 

(1) Maximize value of expected reliability minus the cost of 
providing it where we assume constant value of units of reliability. 
(2) Maximize the expected utility (ex ante profit) of the 
reliability provision where ex ante profit is theoretically defined 

ee) bol bows : 
Let 
G = marginal utility of potential gain 
io = marginal disutility or 'porentiali loss 


X = units of reliability provided 
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Then 
ex ante profit - [ - L) dx 
where the potential gains and losses are calculated uSing the risk 
probabilities. This calculation will not be done because the utility 
function is not known but qualitative judgments can be made from 
postulation of its general shape. 


(3) Extend the above analysis to allow use of subjective 


probabilities. 





IT. PROVISION OF INITIAL RELIABILITY 


A. Subsystem Reliability Allocation 


To begin taking one step at a time in attacking a very complex 
problem let us first consider how we might arrive at a reliability 
goal for the REB, one subsystem of the missile, abstracting from any 
consideration of degradation with age. That is, we consider failure 
rate as zero during any period of the FTS except time in missile flight. 
This facet of the problem will be considered in Chapter III. 

For a weapon system made up of several subsystems the general 
problem is that of allocating reliabilities to the subsystems so that 
overell reliability is attained at minimum cost. In terms of production 
theory the output, system reliability, is a function of the inputs, 
the reliabilities of the various subsystems,with each of the latter having 
anden cost tunetion... The problem às very non-linear and complex 
Ihe design options are not only non-linéar with cost but are usually 
non-continuous functions. The various alternatives involve quantum 
jumps. There are also interdependencies among the subsystems in the 
BLedueuton Funetion- Also, the costs to be properly taken mico 
account are not pecuniary costs alone but opportunity costs as defined 
in Section ID because the design options will often affect other 
parameters than reliability in the systems effectiveness relationship. 
This is another way of saying reliability is not the ultimate MOE. 
However, these complexities notwithstanding, the allocation could in 
principle be solved for an optimal decision of obtaining given system 


reliability at least cost. In the solution set of all subsystem 


iy 





reliabilities we would expect the marginal product per dollar to be 
equal for every input - that is, the marginal unit of reliability to 
Sele vie Same in every supsysctem. 

In practice the reliability goals may not be set in this manner 
and possibly with good reason, considering all the uncertainties in 
any Calculation. However, conducting the cost estimating exercise 
may give some valuable insights into parameter sensitivities and be 
of great assistance in making good judgments on alternatives, even 
though little faith is put in exact attainment of the calculated 
values. There may also be good reason to make decisions about the 
re-entry subsystem design independently of the other subsystems - 
except for using the cost of the wer-all missile system as a measure 
for pricing the product, the reliability provided within the REB 
subsystem. On technical grounds the REB is from a functional view- 
point relatively independent of the rest of the missile functions. 
Most of the fallibility occurs in a device which operates during 
time when the REB has been separated from the missile. Also, techno- 
logical advances or reaction to enemy defenses may dictate putting 
new re-entry systems on the same missile. Lastly, there are 
institutional impediments to close engineering optimization in the 
development of the re-entry body with the rest of the missile because 
the warhead portion of the REB is provided by the Atomic Energy 
Commission, a co-partner with the Department of Defense in REB design 
changes. Negotiating interface changes with an autonomous partner 
can be a lengthy process. This impediment may seem unreasonable 
SUC ELeL Ts. Led |... 

Due to the high cost of a strategic missile system for delivery 


of the weapons, it soon becomes apparent that the reliability provided 
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in the REB should be relatively high, well into the area of decreasing 
marginal returns of reliability gained from improvement activities. 
There is then a temptation to merely estimate what might be technically 
feasible without regard to cost and set this as the reliability goal. 
mais could be the proper goal, but it might be too high. It might be 
cheaper to buy more missiles rather than trying to push REB reliability 
into a very high marginal cost region. 

Consider the MOE for the next higher level criterion to be the 
Capability of inflicting damage a a given target complex. The number 
of REB's required is a decreasing function of their reliability while 
moe cost lol the REB's is an increasing function of their reliability. 
For reasons cited above the over-all problem of minimizing the total 
cost of a system to do a given amount of damage will not be worked 
directly including the REB as one of the subsystems, but the marginal 
Gost curve of units of REB reliability will be generated from various 
reliability levels. This curve is the supply curve of reliability 
and is useful in finding an optimal level of reliability if we can 
provide the proper marginal value of REB reliability consistent with 
the ultimate MOE. 

If one assigned a constant price or value for one unit of 


reliability percentage” this price would be proportional to the fractional 


> 


2 ee 
cost of the missile system required to place one weapon on target 





‘This assumes that the price of product is constant no matter what 
quantity of product is supplied, or, in other words, that all units of 
AR are of equal value to the customer. 


Br fractional cost we mean the total cost of the missile system 
divided by the number of weapons that system will deploy. We wish to 


reserve the term average cost for total cost of reliability improvement 
effort per weapon divided by units of reliability improvement attained. 
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divided by 100%. For this purpose what is meant by cost of the missils 
system? It is certainly more than the initial investment cost of 
missiles and also more than the investment cost of missiles and the 
remainder of the system, such as the launch platform and maintenance 
facilities. The most suitable cost would seem to be the present value, 
referred to the start of some planning period, with all investment and 
operational costs of the entire missile system included over the expected 
life cycle and discounted at an appropriate interest rate. Less than 
100% reliability can result in a weapon's failure to function any time 
during its life cycle. This manner of uSing present value to relate 
EOuprice Of product implicitly assumes Constant probability of use in 
Aer parouahout the Life cycle. Ihis assumption may mot De «easily 
Getrengdea bull às no less reasonable than any alternative assumption in 
ma regards The cardinal value is not too significant im uns analysis 
for the following reasons. We will be comparing the price of product 

to the cost of reliability percentage at the margin. It seems logical 
tia res pelliability units at the margin w1ll not beras valuable itn 

the consumer as the reliability units in the lower range of reliability. 
First consider this matter if the mission were deterrence. Certainly 
anything above zero reliability is of some value and its unit value 

may increase as reliability improves to a significant level of capability. 
Eventually we expect marginal value to decrease, and the level needed 


l E 
for any given confidence of deterrence becomes very fuzzy. Next, if 





lof course, all that is really needed for deterrence is the enemy's 
belief in the destructive capability of the system. It has been said 
that if the missiles were not ready on time, the first POLARIS sub- 
marine should have gone to sea with telephone poles in the missile 
tubes. But in our society it would be difficult to convince the enemy 
we had an effective weapon system if we did not believe it ourselves. 
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the MOE were capability of destruction of given portions of the value 
of a target complex, in most targeting schemes we would still have 
diminishing returns as the number of weapons on target increases. 

The price of product based directly upon the fractional cost of the 
missile system may thus be looked upon as an upper bound of the value 
of the product as implicitly determined by the decisions of some higher 


: : 1 
levels of authority in making an investment in the system. 


Tnıs manner or prorating costs to each weapon in the case of a 
tactical missile system would result in estimates of price of product 
of considerably lower order of magnitude than for a strategic missile. 
This would not be due alone, or possibly not even primarily, to the 
lower cost of the tactical missile. A major difference is that many 
missiles may be used in each launch facility; that is, there isa 
capability to reload in the tactical systems while the strategic systems 
are only supported for a one-shot war. If many reloads are expected, 
the cost of the entire system is divided by a large number in prorating 
cost to each weapon. A common practice in cost effectiveness studies 
of assuming the military worth of a weapon equal to the cost of the 
weapon alone then is not too bad in this event. On the other hand, 
the costs of some of the activities to improve reliability for the 
tactical weapons may not be that far removed from similar costs on 
the strategic weapons, particularly in the category of direct costs 


aS opposed to opportunity costs. Thus, we might expect some 


‘This conclusion follows because the expectation of weapons which 
will detonate on target is a direct multiplicative factor of expected 
Deiiabilbicy. Jhe value or produce (AR) then, dr calculated by pro 
rata costs of the entire system and treated as constant throughout 
the range of AR provided, would be too high at the margin of reliability 
improvement due to the decreasing utility of unit AR as reliability 
increases. 
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dramatically different conclusions on how far to pursue reliability 


improvement in the different systems. 


B. Generalized Lagrange Optimization Problem 


If we consider several different activities to improve reliability, 
the efficient combination of those activities is a constrained optimi- 
zatıon problem: 

Maximize X where X =AR, the increase in reliability above some 
baseline design value; subject Bee = C where C- is the total 
cost of each activity, and the summation is over all activities. 

Where the X under consideration is a small range of potential 
reliability improvement and the number of activities each with small 
individual payoff is limited, at may be reasonable to consider 
X =X, where X; is the AR from each activity, in spite of the 
interdependencies which exist over large ranges and being careful 
to throw out non-feasible solutions where the level of some activities 
might make the assumed cost versus payoff of other activities incorrect. 
Poems lation between each X, and its corresponding C. would be 
expected to be a set of numbers corresponding to different design 
Gpidons or program plans, Ihe X, is the expected reliability 
improvement from that activity level and C; the expected cost, either 
pecuniary or opportunity. Instead of having only a monetary cost 
constraint, one could conceive of several other constraints, such 
as allowable accuracy degradation or weight allocation. Indeed, 
in the usual way of doing business these type of constraints are 
likely to be dictated to the development activity. But if the valid 


MOE is kill potential on target, assignment of an accuracy requirement, 
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for example, by higher authority implies that the suboptimization 
problem for weapon development activities has been solved. It 
appears more logical to translate all the constraints into pecuniary 
or opportunity costs in monetary terms and then look for the efficient 
Solution for use of development activities. 

Thus to solve the suboptimization problem of where to put the 
reliability improvement effort we have a problem with the following 
eharererjsties. Moaximize a payoff function, reliabilaty improves 
ment X, made up of the sum of Several semi-independent activities 
each producing an X, at a cost C.> with an over-all constraint of 
me =C. Since we are not putting great faith in a particular 
quantitative value of an optimum solution, we want a technique which 
gives considerable insight into the qualitative nature of the parameters 
without unduly extensive computation. The technique suggested is 
that of the Generalized Lagrange Multiplier Method described in 
reference [23] for solving problems or opesmum allocation Or econ ea: 
which can be applied similarly here for optimum allocation of relia- 
Pility improvement activities, each utilazing Che one- monetary 
resource.” For each activity we will maximize the unconstrained 


Rune tion 


where « is the Lagrange multiplier for the over-all problem. We do this 


for a range of m values. Then a set of X, and C. which is feasible 


eh ys Sc ee An 


E more complete explanation of application of the Generalized 
Lagrange Multiplier Method to this problem is given in Appendix 1. 
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represents optimal solutions to the overall problem: 


Maximize: X => X, 


Subject to 20, =C, 
A plot of C versus X for various u values will build up a total cost 
curve from which we can derive average and marginal cost cruves. As 
in the ordinary Lagrangean formulation, the « corresponding to any 
Solution point Is = er = equals the marginal cost of the 
reliability improvement. 

It should be emphasized that when speaking of average and 
marginal costs the quantity of product referred to is units of 
reljapilıey (or units or hazard product as deiined in Section IR). 
In normalizing these costs to be applicable to one weapon, of course, 
some calculations are carried out in the usual sense of a fixed cost 
for a certain development activity and unit cost per weapon for the 
Siilesactivaty. Thus our C; Ca vEOra Cost Mine terms or ~preaues X,) 
when a pecuniary cost is actually a sum of (1) a per weapon cost and 
(2) the quotient of a fixed cost divided by the number of weapons 
BeepGoed Torstotalypreductaon., ft is ’e¢lear that, oppereunivy. costs 
as used here must be calculated so as to be applicable to one weapon 
deployment capability in the fleet in order that they may be added 
directly to the normalized pecuniary costs (neglecting a small amount 
of spares which would bring production totals above deployment 
Capability. 

Consider a hypothetical program where the weapon is an REB for 
a strategic missile. The warhead in the REB will be caused to 


detonate at a prescribed height above target by an electronic arming 


and fuzing device (AFD) in the REB. We will assume that all the 
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EAOa a (reliability reduction) comes from the AFD. Let us assume 
MO vant- to decide upon design-alternatives in Tour activity areas 
of reliability improvement to a basic design which presently exists 


with an expected initial reliability of R. resulting therefrom. 


O 
Expected reliability improvement and cost estimates for different 
levels of intensity are needed for each activity in order to tabulate 
the reliability improvement (X; ) versus cost (04) relationships for 
use in a generalized Lagrangean calculation. The activities chosen 


and an approach for generating the X, versus C. relationships are 


described in Appendix 2. 


C. Generalized Lagrangean Calculation 

To illustrate use of the generalized Lagrangean we will assign 
some numbers to our hypothetical missile development program. 

Assume a missile system whose projected present value of cost 
exclusive of provision of the REB's at the beginning of a ten-year 
planning period is 20 billion dollars. The system has launch facilities 
for 500 missiles, which pro rates 40 million dollars per missile, 
neglecting consideration of spares. If each missile carries ten 
REB's, this fro rates four million dollars per REB, and assuming 
one million dollars for the cost of the basic REB, we assign a value to 
deployment of each REB of five million dollars. Calling this the 
worth of close to 100% reliability, we assign a price of AR as 50 
thousand dollars per one percent of AR. 

Assume the basic REB design has an expected reliability of 90% 
and the (X, = AR) versus C. relationships obtainable for activities 


1 = 1 to 4 are estimated to be that shown in Table I. The activity 
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numbers refer to those described in Appendix 2. We will keep in 


3 
mind an additional constraint that a solution which shows D nn 6 


1=1 
is not feasible, the reason being that activity #4 could not produce 


reliability improvements at costs given due to decreasing marginal 


returns if this high an aggregate intensity level for the first three 


were used. 


i X, (%) C. (KS) 


Ze 

100 

300 

10 

2 50 
200 

20 

70 

300 


20 
2 40 
3 100 


i = activity index number 
X, = reliability improvement 
C: => GOSt of reliability -amprovement 


TABLE} La RELIABILITY IMPROVEMENT VERSUS COST 
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Next we use various values of „and compute X, - MC... Results 
are shown in Table II. The asterisk values in the table trace out 
the unconstrained maximizations for each activity level. The X; and 
C. corresponding to these values are added to give the total X and 
C for each value of u. Average and marginal costs are then calculated 
as shown and plotted in Figure 1. 

Note the plot shows that if we continue to price the product at 
SOKS and use marginal cost, we will choose a program with an expected 
reliability of 96 or 97 percent. However, if average costs are used, 
which may be done in effect even though a conscious attempt at pricing 
@ne product as not done, the cost curves indicate one should push 


beyond the 99% level. 





Res OE OTI 02 r025 >03 


= pejiability improvement 


= cost for reliability improvement 


RC =. average cost 
Me > = "Mera nal coso 
4 = Lagrange multipiier 


IEDERE IT: (X, -4C.) FOR VARIOUS VALUES OF Mm AND COST 


CALCULATIONS 
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FIGURE 1. AVERAGE AND MARGINAL COST FOR RELIABILITY IMPROVEMENT 





III. MAINTENANCE OF RELIABILITY 


A. Reliability Model 


In this chapter we will consider the problem of selecting an 
optimum design alternative, taking into account the degradation during 
dormant conditions. We will be looking for a minimum cost solution to 
obtain a given effectiveness level as a function of (1) the initial 
reliability and (2) the planned frequency of periodic tests to find 
correct farlures rates which occur during dormancy. 

For an example of how dormant failure rates might be important, 
we will consider a simplified FTS for the REB of a hypothetical ballistic 
missile shown in Figure 2. There is an electronic AFD of given series 
complexity in the REB. The AFD is dormant until it rides a missile 
after aging for time t. It is activated after time t, of missile flight 
and must operate for time ta during re-entry before sensing the target 
and detonating the warhead. The expected hazard products during each 
phase are shown at the top of each box. Assume failure rates and times 


Shown below: 


Rate (failures per hour) Time 
A => E 4 
1 7 2-10 t = 10 years (8.76-10 hours) 
-2 
Ao = ,05 to = 2 minutes (3.34-10 hours) 


=] minute Cl ee hours) 


> 
| 
ra 
© 
A 

| 


Then, the expected hazard products and corresponding do as 
ae ) 

Zn 
are as shown in Table III. The reliability when new, Ry =e ; 
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aN 





drops from 98.1% to 17.1% at the time of firing. If A, were a factor 


of 10 lower, the resultant reliability would be 82.5% or a reduction 
of about 16% from Ry: 


t 


A 






Storage 


and and 








Dormant ESOS 


(non-operating) 





(non-operating) (operating) 





Phase 1 Phase 2 Phase 3 


FIGURE 2. FACTORY-TO-TARGET SEQUENCE (FTS) 





A. = failure rate in failures per hour 


Ges = Lime sine neues 
Nt. =zihazard Product 


Es 
E E 5 


TABLE III. HAZARD PRODUCTS AND RELIABILITIES 
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If a constraint were imposed that reliability must not be below 

90% (R>R* = .9) during a service life of ten years, under the wooden 
bomb philosophy the constraint would be violated. A no-test solution 
would be complete replacement of AFD's corresponding to their age when 
reliability drops to the constraining level. This is likely to be a 
very high cost solution. Another approach involving no tests maght 
be feasible in a ease where Ry of the basic design and R* are lower, 


allowing room for improvement in reliability of the basic design to 


increase the gap between R, and R* enough to allow for degradation with 


0 
age. In addition to monetary costs of a higher reliability design 
we would have degradation in the performance portion of the MOE due 
to the larger weight and volume of the AFD. This solution may in 
many cases be technically impossible because of the limited size of 
the gap between R and 100%, and the difficulty of increasing Ry as it 
approaches 100%. 

To consider how often periodic testing might be economically 
efficient to cull out failures, one must first determine whether or 
not reliability improvement is even feasible from a test and maintenance 
cycle. This has been analyzed for missile reliability, not considering 
degradation with age but from the viewpoint of raising the reliability 


Oma JOC or missiles by test and maintenance [14]. The model has the 


following parameters: 


a= probability of (a= vreliableymissile being rejected 
by test (producer's mask) 


ß = probability of an unreliable missile being accepted 
by test (consumer's risk) 


y= degradation of missile reliability during test and 
meintenanes e yele 
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Po = probability that a missile will be repaired 
during Maintenance cycle 


Equations are derived for the new reliability of a lot for given 


parameters. For example, using values of 


&a = al 
B = .20 
NI 
Po = .90 


ie anchor found that for initial reliability of a lot greater then 2892, 


the result of test and maintenance is a worsening of the reliability of 

AD 
Ro 

maintenance cost as maintenance cost divided by efficiency, and shows 


the lot tested. He then defines efficiency as and effective 


that effective maintenance cost doubles in the region of Ry From s0 to 
85%, and of course becomes infinite near 89% for the above parameter 
values. 

Let us assume that for our REB maintenance cycle we have condensed 
these parameters into a factor, "a", which is the fraction of failures 


discovered and corrected, assuming negligible degradation during test. 


Then to the FTS we add a repair/replace loop as shown in Figure 3. 


For 
a = .9 
Cie 9% years (dormant time before test) 
to = % year, (dormant time after test) 


we get the results shown in Table IV for the two A, values considered 


earlier. The reliability after ten years without testing compared 


“Tf not assuming negligible degradation during test we could still 
define an "a" such that (1 - a) times the original number of failures 
is the number of failures in the lot after the maintenance cycle. 





rity 
Storage 
and 
Dormant 
Phase la 
-a r,t, 
Eos 
Y 
ni: Repair/ 
Replace 
If bad 





Storage 
and 
Dormant 
To Phase 2 
(Boost 
and 
Flight) 


Phase 1b 


FIGURE 3. FTS WITH TEST AND REPAIR/REPLACE LOOP 








A = dormant failure rate (failures per hour) 
a = fraction of failures corrected in maintenance 
Cole 
Ci en = hazard product after dormant time E and 
maintenance cycle 
A Ec = hazard product after test cycle during coment 
time t 
5 
Not, = hazare product during boost 
At, = hazard product during re-entry 
A. 
R, = e 
1 


TABLE IV. RESULTS OF MAINTENANCE CYCLE 
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to the case with testing for the two dormant failure rates is: 
17. la raised to 76.2% 


82.5% raised to 95.7%. 


B. Problem Analysis for Absolute Minimum Reliability Requirement 


For simplification of cost analysis let us condense the FTS even 
Mere and assume that all failures occur during dormancy time before 
m Sile flight and operating time during re-entry. 


Irene the hazard product 


1 


and after test and repair/replace the hazard product 


t ses o 
h E (1 a) r,t 


1 1 


Bar pertods of equal length t. between testing, after m periods :1 


T 


u n-1 n-2 
nt, = | (l-a) + (l-a) + ....(1-a) + | ee 


t E n n-l 
h nt, = | a-a + (l-a) + ooo (da) | A Es 


these two expressions are derived as follows. After each period 
of length t,, A Es is added to the hazard product. After each maintenance 
cycle the resultant hazard product is obtained by multiplying by (1 - a). 
For example, for n = 2: 


— = a = = ALT 
E go + At et ayA,t, + A, €, [a a) + | i 


eee = (l - a) > [o - a)“ + (1 - d] Ay E, 
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Neglecting terms of (1 - a) raised to power of two or more, 


es (2 - a) A, E, 


IR 


h! 


= A = 
ae (call a) it = h' 


1 E i 


Then for some selection of t, in combination with a given initial 


E En 
Soljability Ro eonrespondingete Ro =e © where Bo =A,t, 
de initial hazard product, the total hazard product h versus time 


is called 


Ber a service life of length T = nt, would look like Figure 4. 


Let us examine a solution for the case where higher authority 
prescribes an absolute minimum reliability level as a requirement. 
This may not be the most logical way to consider the allocation of 
reliability effort, but it may often be the actual conditions under 
whıeh it must be done... For many institutional and administrative 
reasons what should be treated as a first approach reliability goal 
may become a firm requirement. This would imply that the higher 
authority knows in absolute terms the maximum effectiveness necessary 
to achieve a certain result - such as a given kill capability to assure 


deterrence. 


Suppose a constraint is set that each REB never have a total hazard 
product greater than h* (R > en”, Let us assume that the REB has 
a basic Bo which will not meet the constraint as a wooden bomb throughout 
its service life, but improvement in initial reliability is possible, 
and correction of dormant failures through test and maintenance is 


feasible. The cost function Cm for each REB will be made up of three 


Parts: 





Ao + A, 1 
EO 
/ 
/ 
J 
A 
A 
A 
z 
7 
A 
/ 
/ 
ve h, + (2 - Mt, 
mima / aoa 
/ = AJA, € 
0 an 
h, dh O RR VS 
E Us ta ta nt, 


FIGURE 4. HAZARD PRODUCT VERSUS TIME 
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ee Cho? = the cost of obtaining a given initial reliability 
as computed by the generalized Lagrangean technique. 





(2) Cost of testing, Cal , where 
t 
1 
Cm = cost of a test (monitoring) operation 
A = prescribed service life 


(3) Expected cost of repair or replacement for failures 
detected, Curta AT), where 


Ca = average cost of a repair operation. 


We will consider the third term as a fixed cost, not a function of 


1 
Ag and t 


We also assume "a" and Aa are not Functions oF N 4 


O 


Lto be plausible for C_, this assumes ability to repair the AFD. 
C_ would be a strong function of h, if replacement were made. But 
even complete replacement might be’ much smaller than C(h,) which is 
eomigacea by Opportunity costs. It the APD could ‘not be replaced so 
that C_ was on the order of a complete REB cost, then the term probably 
becomeS of more significance relative to C(h,)- 


“The assumption would be totally unrealistic for A, if the "basic" 
reliability were of low order. For Chen the measures taken EO improve 
h, in the area of manufacturing and quality control would be assumed to 
réduce dormant failures, which are due largely to built-in defects. 
However, on the assumption thet some of these built-in defects cannot 
be detected by testing, the improved screening process will not discover 
them, and it is likely that the process cannot be improved to eliminate 
a detect whose nature is not known. In some regime of high initial 
reliability, \. may be almost independent of h,. If we assumed that u 
would remain approximately a constant proporti8n Gi Uz WicN TS Andie ted 
by statistical results in some reliability regimes, we could represent 
A, as a constant times h,. The following analysis could be carried out 
Ss eis basis. but the results would be much more complex to analyze. 
Note also that C. would be expected to be a decreasing function of h 
while A. would increase with no: Thus the changes due to Bo would ténd 
rezeancel-eseh-other. 
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The problem then is to minimize: 
CE 
m 
ai 





Cp (Aj ti? = Cho? + + Ch . (aA T) 


SUD] ec acer 


E eas ne 


Note that for a given h, the constraint equation determines E 


0 


because the largest t, possible will minimize cost for the given 


1 


ho: That is, the equality will hold in the constraint equation at 


an optimal solution. We can thus compute total costs for each of the 
ho values corresponding to design alternatives for which C(h,) values 
were computed by the generalized Lagrangean. Results of such a computa- 


tion are shown in Table V for the following parameters: 


Ca = 1 (K$) 
T = 8.76: a hours 
a = .9 
o -5 
A, See) per hour 
Ca = unassigned because the fixed cost does not affect 
the optimization 
hº = .10 and .06 (R= = 90% and 94% respectively) 
Variable Cost (VC) = C(hy) + Cm 
t 
1 
Note that for R* = 90% no minimum cost is found in the regime of 


design alternatives considered although the values seem to be quickly 
approaching a minimum near the lowest value of Ro equal 94%. In this 
case we might guess that there is something inconsistent in the value 


judgments which resulted in spending the total amounts indicated for 
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3 
(10 hours) (KS) 


nº = maximum hazard product allowable 
R* =a = 
Ao 
Ro = initial reliability =e 
ti = period between tests 


Cho) CB Korn clalterelıcnılıcy 








CT 
= Cost of testing 
t 
} 
CT 
ve =. variable Cost = CNA) 
0 ty 


TABLE V. TABULATION TO FIND MINIMUM VARIABLE COST AS A 


FUNCTION OF ho AND Es 





AD 


the total program but would then set R* as low as 90%. For R* = 94% 


the minimum cost is found at R, = 96%. In summary, the solutions are: 


R = 90% R* = 94% 
Ro < 94% 96% 

t, (hours) < 1.82 - 10° S10- 10 
n > 48 96 


Of course, if we examine the technical and operational constraints, 
an indicated optimum solution may not be feasible. 

Ne~erleseius pose che cost minimization: problemn Tor Ssoluvions by use 
pia kagrangean with the constraint expressed as an equality. As will 
be indicated, it is not particularly useful in this case as a method of 
finding the optimal solution but, as pointed out by Samuelson in 
reference [15] , 1t is often possible by using this framework to 
determine the qualitative behavior of solution values in respect to 


change of parameters. 


ltor example, the solution for the R* = 94% case calls for a 
monitoring operation approximately every 5% weeks. The C_ assigned, 
if based only on the pecuniary cost of the monitoring operation, assumes 
the REB would be available for test anyway, presumably to coincide with 
down time on Some other part of the weapon system. If this were not 
the case and C_ had to cover weapon unavailability costs, C_ would be 
much larger and more dominating in the solution. Also, we are assuming 
the number of tests over a service life is not large enough to cause the 
failure rate of any of the components to move into the wearout region. 
This is a function of the nature of the monitoring operation. We could 
reduce the thoroughness of the test to avoid wearout but would also 
inevitably reduce "a", the fraction of failures corrected which depends 
on the number detected. So in the end, if none of the solutions look 
feasible, we reconsider the basic design (perhaps allowing more for the 
characteristic that our devices be amenable to testing) and recompute 
the Cha? relationships. 
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Let the Lagrangean, 


Cy = Cp a | hy + (2 - a) - Mt = ht] 


First order conditions for an extremum: 


ðC 








PC = Îr au =0 or p= — = I 
ah. dh, 0 0 
aC, ð Cr 
ne on E = = q = = 
a >t (2 a) Ay O where ICa o CT 
1 ge E 
ot, E 2 
L 
9er a 
De ho - (2 - a) AE + h* =0 
1 ne HG 
It follows” that u = T which is the marginal imputed cost 


ol che Constraint. 


this is shown by taking total derivative of C_ and the constraint. 
AR Rio no first order conditions: T 





ðC ðC 
dC. = g dh + T dt 
ae = q = = 
T af 0 ST dh, + (2 a) A, m dt, 
0 at 
„(dh + (2 = a) Si dt.) 


On = dh, + (2 - a) hat, 


Then, 


dC 





dh* 
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TOf c Olve for h ander note that by using the last equation 


O al 
we can express t, as a Fume Siem.) Gr ho: Then if we could express T 
O 
as a function of no: we could write the second equation with Bo 
as the only unknown and solve for ho: However, even if ðC were 


ah 
O 
linear in Ng (which in general it is not), we would have a third degree 


equation to solve for no: In our discontinuous example, 90 1s 


ah, 


approximated by straight lines, but, to take advantage of this, one 
would have to guess which segment would contain the Solution point, and, 
if the solution is near a change in slope, the answer might be erroneous. 
Thus, the iterative tabular method seems the more practical for getting 
ei Indication er the «approximate optimum solution inthis ease, but 
it depends on the form of the cost information. 

Taking the total differential of the first order conditions gives 


the following matrix equation: 


| 
I 
2 
ur -1 O Soe 
dh ROD SWP A MO a 
O i 
| 
l 
i a de ene 
O 20,1 | -(2 - a)A, dt, = = =o 
3 . 1 
E l 
1 | 
| 
o + (2 - ajudA, -Auda 
| 
SS SÊ es SE NA E oe qe E J en 
ei Se a)r, 0 ds (2 - a) tidy -à t da 


-dh* 


a a 





This is of form Ay = b where 


A is the bordered Hessian (the Hessian above and to left of dotted 


line) which must be positive definite for a minimum, a condition which 


is satisfied if 9° as Poort ge? 


2 
9h, 


, Which is true over the relevant 


Range Of Bo as depicted in Figure >, which 1S plotted: From the: informacion 
mo treble Il. 
-1 
Porming y= A b 


allows the qualitative examination of relations between parameters. 


For example, if dT = dh, =da = dh* = 0, 


Sy Veen | where 





q refers to the second diagonal element of i which is known to be 


22 


positive. This shows how the period between tests increases with the 
cost of tests. 

To illustrate further use of the second order conditions, let us 
put in the values for our solution for the h* = .06 case. The values 


are summarized below: 


tthe sign of the determinant must be negative because there is one 
@eiebraintws Expanding. bye tie <rirst column gives 


2 E 
z > - (2 -a S Dam 


ð E 
o 1 





2 


Thus both terms are negative if die LS positive. 


2 
dh, 
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solution Values Parameters 
ho = .04 T= 8.76» DE hours 
t, = 910 hours o o 
n = 96 eee 
Cr = 135 + 96 + 1.58 Cr Con = 1 KS 
= 231 + 1.58 Cc. hº = .06 


Bang these values the matrix enuetion after multiplying by Di 


becomes: 
-6 -2 
dh, le ne oco -.83 O 
106 dC + 1.21.10 Car 
dt, -1-7,.83 . 107? SoG. 10° or 5; -4.95.10°da, r SOCO aa 
oo oc 
du -. 83 _7.83.10° -8.3+10 10%4A, - 1.82:10 er 
dh” 
at, 
We can then find m— = 377 and deduce that ta will increase with 
oc 
m 


Co but proportionally less rapidly by about 1/3 from the equilibrium 
position. 

Since dormant failure rate may be a parameter with very large 
proportional uncertainty, let us examine the effect of its change with 


all other parameters constant. The matrix equation snows 





ah 
0 
= - 449 
IA 
AR 
=- 2,54 . 10° 
1 
ð H 7 
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-5 


Suppose AM = 10 ~, corresponding to a 50% increase in failure rate. 
Then, 

Ah, = - .004 

At, = - 254 hours 

Au = - 442 KS per unit h (greater in absolute value). 


The ho and u solution values have a smaller proportional change 
(about 1/10) than ty: which must be decreased by about %. This could 


be an encouraging result if t, could be changed easily during the 


1 
operational life to take care of an unexpected dormant failure rate. 
But it may not be the case and indeed, in this example, it was indicated 
Far ey) chat the Optimal solution initially called for would probably not 
be feasible because of E, being seo short. 

These results suggest that it may be most practical in many 
systems to work the problem sequentially - first, finding an efficient 
Polen on anacal reliability allowing sor he possabil risco 
unfavorable results in the dormant failure rate area; later maximizing 
the return over time, delaying the details of the monitoring program 
as long as possible in order to utilize the best predictive information 


that can be gleaned from the program before making the decision on the 


Meture Of the monitoring program. 


C. Problem Analysis for Average Reliability Over Time 


What is proposed as a more logical approach than the minimum 
reliability requirement of the previous section is to investigate 
what average reliability level over time can be attained. This seems 


better for several reasons. First, the likelihood of use 1S a completely 
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random event for which average values over time are appropriate if the 
swings above and below the average are not too large. It appears that 
our answers tend to point toward a fairly larger number of test cycles 
which will keep the variance small. Secondly, the variations in relia- 
bility plotted over time are for a single weapon. In a practical 
case the condition of different groups of weapons in the fleet being 
in different parts of the cycle will cause a smoothing out of the 
average reliability over time when looking at the fleet as a whole. 
And it is this average as a whole which determines the effectiveness 
of the entire weapon system.” 

Another way of looking at the objective is to consider that the 
goal is to maximize the proportion of time which the weapon is good 
(no dormant failures before firing). This viewpoint allows closer 
analogy to investigation on inspection programs for randomly failing 
equipment in systems which are not one-time use but operate more or 
less continually. For example, the paper by Weiss [16] which refers 
to some of the many earlier papers on the subject says that the 
objective of any checkout program is to minimize the down time due to 
system failure (or maximize the expected operational readiness of the 
system); and that when the reliability function is negative exponential, 
the optimal checkout policy must be a periodic one. It is not considere; 
important here to rigorously show that the optimal inspection program 


is periodic because practical considerations would undoubtedly dictate 


R e ee PPP PPP PPP A A—A—Ák 


lof course, much of this argument is valid for using the minimum 
reliability requirement also, but the concept of adjusting effectivenes: 
levels dependent on the cost of attainment seems more palatable when 
we get away from the rigid specification of a minimum requirement. Also, 
the minimum level framework may tend to give answers which pay too much 
for avoidance of dropping below the minimum level for a very short 
period of time. 





its use, the advantage of simplicity in scheduling the checkouts 
outweighing any small theoretical advantage of a more complex program. 

Again considering the problem in terms of hazard product and 
looking back to Figure 4, we see that without testing over the service 
life T, the expectation of hazard product, 


= 7 ho + Cho +A, T) >, Sl 
Fio a A É Zee 
2 2 





With testing, 


[ro + (1 - ajat | +[n, + (2 - a), +, | 


Ms 
2 
3-2a 
A ia a 
or defining Di pá 
2 
IE a ee ae 


Then the improvement (decrease) in h is represented by 


= E Ay 
h - h = —— (T - 2bt,) 
WACH, 2 l 


If we can assign a value P to a unit of decrease in h, then the 


"revenue" from the testing program is 


L e 
é P A (T 2bt,). 


As before, for a given no: we can represent the cost of the testing 


program as 








We could then find E, to maximize "profit" expressed as revenue minus 


a E 
cost or 4 PA (T - 2bt, ) - ( U ee a 1) 
t r | 
dh 
erst order condition: 
-DP à} + Cat = 0 
t 2 
1 
CT 
Or ti = 
DPA, 
Second derivative: 
- 22 T 
m 
—— 
= 


verifies positive root corresponds to a maximum profit. For example, 
using the same parameter values as in previous section for the ho = 
design, noting that D = .6 corresponds to a = .9, and assigning 


e o KS, our upper limit of the value of unit h, corresponding 


to 50 KS per 1% of AR, results in 


Eo ee 10° hours and 


Meee Za 
or an inspection about once every 6.6 weeks. 


Bor Ar = 2 + o per hour, the solution would be 


Li See E 10° hours 


iia 





Do 


or about once every five months. Thus, reducing the estimate of dormant 
failure rate by a factor of ten still leaves a solution which calls 
for considerable re 

For an analysis of the parameters consider the problem in 
Lagrangean format, leaving out an assigned value of unit hazard product 


(P). The problem is to minimize 





Cal 
(= + Co -a.T 
t ic E 
1 
subject to 
Ag + DA, tz =e ie: 


Nolte reinas once dll” parameters are assigned. the constraint equation 
determines t, which then determines the cost so this is really not an 
extremum problem at all. However, using the Lagrangean format as in 
the previous section allows some insight into the nature of the 


solution with qualitative change of parameters. 


The Lagrangean: Cc =C -ulh, + DA, Y, - A] 


First order conditions: 





dC, ZA UT 

= 2 CN uu) 
dt, t, il 
dC) 





Of course, the maximum solution could be at a point of negative 
profit 1f the “fixed cost" term containing C were high enough. But 
this term is not expected to be dominating even if C_ involved complete 
replacement because of P being much larger than Cu 
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Then 
ti =h - ho 
DA, 
ME = Cal g -C nT PA E ac 
> T = 2a 
DA, ty (h - ho) dh 


ao coral cirferential ot the first order conditions and multiply ing 


through by inverse of Hessian as before gives the following matrix 





equation: 
= is E 
—— dC + m dT + biudA, + Bda 
OR 0 2 m il I 
DN 2 
E 1 ij El 
En = = 22 T 
A DR IE - dh 
1 b N, Er bt, da, +A, €, db + dh. dh 


To compare this approach with the (h E, ) optimization case of 


e 
previous section where we set h* = .06 and found 
No = .04 
ty = 90 hours, 


our constraint equation indicates that we would set 


| 


h ‚0532 


on. w KS. 


[| 


and u 


This u value is larger in absolute value than the value of product 
assigned (P) in our profit maximization calculation so the smaller 


frequency of checking in that calculation is consistent. 
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With these parameter values and for changes in Ar only: 
gt 
re, 
ð 
A 
EN 
ðA 
1 
i _ -5 
Then if Ad, ae 
At, = 455 hours 
3 e . 
Au= - 4.38 - 10 KS per unit h (greater in absolute value) 


Compared to the Chg? t) optimization case, the change in A 


has a much greater effect on the solution values, -455 compared to 


-254 hours for ty and -4380 compared to -422 KS per unit h for AB. 


Somileriyv for changes inv b only. 





at 
ag 

ð b 

A 
db 

Rs = TI corresponding toAa = ilor bD =. and a=k); 
At, = 90.8 hours 
ARA EOS ESE 
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The cost in the testing area per unit h is seen to change more 
rapidly chan total costs.” Mhe combination solution for Bo and 


ta tended to mask the importance of high "a" in keeping down 
A 

The interdependency between some of the parameters is also 
well aiius rooted graphically: hooking at kas a function os 
Cm and for the parameters chosen, #= 8.83 > o Co is plotted as 
the middle line in Figure 6. Choosing h so as to reduce (h - hy) 
by half results in the lower line and doubling (h - họ) yields the 
upper line. One could compare the intersection of the chosen 
line with the value of Co, against his idea of the value of the 
product, one unit of h reduction. Starting with the upper line, 
one would want to reduce h until the indicated or marginal cost 
equaled the value of the product. One can also see in this figure 
that, dependent on the choice of (h - hy), marginal cost may or 
may not be very sensitive to C- For (h - họ) very small (little 
degradation in reliability allowed) marginal cost 1S very Sensitive 
to Con” 
IIS type: ox analysis could Of Course pe extended co anve cm 
gate the sensitivity of other parameters in a similar manner. 
Those parameters whose values are not well known and to which the 
solution is sensitive then provide valid warning against too much 
confidence in the indicated design solution. 

Thus far we have indicated a method of economic analysis 
to maximize the value of expected reliability minus the cost 


of providing it. We will next look further at modifications based 


on utility and uncertainty considerations. 





o o 
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IV. UNCERTAINTY CONSIDERATIONS 


In this chapter we will consider in a qualitative way 
those activities of reliability improvement which were not a factor 
in any of the previous calculations. As indicated in Section ID 
the dividing line between risk based on objective probabilities 
and uncertainty evaluated by subjective judgment and probabilities 
2 ner Cleavers A desoriptive activity might be- categoriz-d 
one way or the other, dependent on how much back-up data is 
available. 

As one group of activities let us consider the reliability 
improvement processes we had numbered (1c), (2c), and (4b); 
namely, 


(le) Functional Design - Improvement of insensitivity to 
parameter changes 


(20) Packaging - Environmental stress protection 


(4b) Operational Procedures - Mitigation of stress factors 


These three activities, most particularly the last two, involve 
what stress factor, k, is to be assigned to the various phases of 
the FTS. The value of k in any event is one of the least well 
known factors in our calculations because the statistical accuracy 
of much of the data is based on experiments on components under 
standard conditions. How this data will apply to conditions on 

a yet-to-be-built weapon system is highly subjective. The 
insensitivity to parameter changes is more directly related to 


the question of tolerance failures versus catastrophic failures. 


SA 





é 
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Again the piece part data is more clearly applied in the area of 
catastrophic failures of parts because the characteristics of 
the design of each device will determine whether a given change 
of parameters in a part will actually cause a failure of the 
device due to tolerance limits being exceeded. Another factor 
complicating zalculation is the consideration of an environment 
caused by enemy countermeasures in which a device may have to 
operate. For example, the radiation environment from enemy 
defensive nuclear weapons will change the tolerance levels which 
determine whether an electronic device will still operate properly 
or not. Determination of this level is difficult enough in a 
benign environment. If one tries to design to be fairly immune 
to tolerance failures in a specific radiation environment (high 
environmental levels because that seems to be a "conservative" 
approach), but one which is deemed unlikely to be encountered, 
the result appears to be a cost for the activity with little 
galeulablergain-in reliability: 

If these are not clearly areas of uncertainty, then they 
at least seem to be activities in which the risks can be slanted, 
dependent on a particular evaluation of failure probabilities. 
Slantino dc used im the manner or Fellner in [12] where the 
mathematical expectation of values is consistently adjusted to 
influence the quantity of product in one way or the other. Consider 
Figure 7. As indicated before in our calculation of an initial 
reliability goal using a constant value of product, P, the inter- 


section of P with marginal cost (MC) gives a reliability level tb 
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the left of the intersection with average cost (AC). Now if one 
maximized utility where the marginal utility of product was 
diminishing, the indicated level of reliability would be further to 
the left as illustrated by a marginal utility surplus (MUS) curve 
Eno ins enc bse1sca, is would be the Same as saying Chacal 
decreased with reliability in the manner of curve P! to intersect 
the MC curve as shown. This is analogous to our previous contention 
that the assumption of constant price of product puts an upper 
bound on the reliability goal which one should set. Of course, it 
could happen that a decision maker assumed constant price and found 
the intersection with average cost, but slanted all his expectations 
im such a manner to select the reliability level indicated by 
correct use of MUS. But that would be happenstance, and he might 
slant to make matters worse. 

Next consiente tii esca Cb). amençias 

(1d) Functional Design - Provisions for test in field 


(2b) Packaging - Accessibility for test and repair/replace 
in field 


(4a) Operational Procedures - Test and repair/replace cycle 


These three activities are all closely interdependent and related 
to dormant failure rates or failures induced by the testing itself. 
In functional design, the circuits must be provided so that 
information can be gained by monitoring as to whether the equipment 
is good or bad. The surest way is to essentially cause the 
equipment to operate, but this would usually involve a severe 
design penalty to preclude significant degradation from the test 


itself. A visual test would not degrade the device but neither 


êy 
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would it give much information. Thus, the test procedure selected 
will not give perfect information, and there will likely be some 
degradation from the test itself. Also one must have a general 
idea as to how many monitoring operations will be conducted in 
the service life of the weapon in order to select compatible 
components. The manner of packaging the functional device within 
the weapon affects the same factors and together the two activities 
largely determine what the "a" factor for a en operation 
will be. The operational procedures would seem more amenable 
to change, such as deciding on tests during the service life when 
the original plan had been to treat the weapon as a wooden bomb. 
But changing operational procedures in mid-life for a complex 
logistics system may entail very real and large costs. 

ine aspect Of uncertainty seems most important in, Lhe plans 
for testing. In general, if one believes the prediction of constant, 
low dormant failure rate Ar > checkout testing would not make sense 
until considerable time had elapsed since production because it 
would give little payoff. Essentially, the payoff is low because 
reliability for the lot can only be improved when bad devices are 
found and corrected. For Poisson failures, a test "good" does 


nothing to improve probability that che device will be good at 
L 





some time later. And few failures will have developed in a short 
time (hazard product, Ay Er > is low). If there were significant 
mis is called the property of "memorylessness". For 


failures which occur in a truly random fashion, a test "good" 
does not change the probability of a failure occurring in the next 
time period. 
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degvadaısien From vesting, che result’ Ol a moni Goring, operation 
too soon (small t) would be degradation of reliability. The 
only valid reason for very frequent monitoring operations then 
WOuld ecm torbe based on une likelihood or the stress tractor an 
the intervening phases of the FTS becoming large for some reason. 1 
If this did happen, it would probably be due to a poor development 
and qualification program for the equipment. Hopefully, stress 
factors Significantly above unity should only pertain for the flight 
phase of an REB FTS. 

Suppose one decides on a wooden bomb philosophy in an REB 
development program based on a fairly low predicted dormant 
failure rate and adopts a design which allows for no provisions for 
best, Or the AED in the field not tor access tothe AFD for repair 
or replacement. Should information from the stockpile sampling or 
operational test programs indicate a wholly unexpected reliability 
degradation has occurred, the corrective action would then involve 
essentially replacement of the entire REB. Let us simplify this 
Situation by saying that if things go as expected, the ex ante 


average reliability, 


R = 96% will pertain. 





"Recall that failure rate during any phase of index i 


A. = k,u. 

1 an 
where k. is the stress factor and u. is the basic failure rate 
under cónditions defined as standard. The k.'s during missile 
flight phases are very large compared to all other phases which 
are usually considered unity so that only the basic failure rate 
applies during non-flight phases. Events such as rough handling 
or testing may induce failures at a rate larger than the basic 
failure rate unless the equipment is rugged enough to withstand all 
these non-flight environments. The occurrence of such induced 
failures is equivalent to increase of the stress factor during that 
phase. 
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With some unexpected failure, and correction being very difficult 
to effect, the resultant ex post average might be 40%. Then 
consider that the utility for reliability is the shape shown in 
Figure 8. The shape is derived from the following considerations. 
From some level of significant damage capability marginal utility 
increases rapidly until above some higher level - before we get 
into our regime of reliability improvement effort - marginal 
utility will decrease. The shape of the curve at very low levels 
is not relevant here. If one assigned subjective probabilities 
to the likelihood of average reliability being the predicted 96% 
or the unpredicted almost complete failure of a component to 
occur, based on experience with programs of similar complexity, 


the judgment might be: 


p Si Ena tos 010% 


ee 3957, thac RA 
Then in a manner analogous to an insurance/betting utility analysis, 


treating reliability units as money, the internal average, 


PS (Ao E ap) OE PDA, 


represents the certainty equivalent of this program. But the 
utility shape is for one who prefers insurance, and the construction 
in Figure 8 shows one would be willing to pay an insurance premium, 
the difference between 93.2% and 76%, to hedge against the 
catastrophic 40% result. Converting all calculations into monetary 


terms, it seems likely under fairly wide ranges on these judgmental 
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values that one could make provisions for field test and repair 


at a cost which would not use up all the allowance for insurance 


premium. 


Another way of hedging against the unpredicted failure mode 
is to use a redundant channel, utilizing different components 
and operating on a different physical principle. This reduces 
the likelihood of catastrophic reduction of reliability from 
unpredicted failures in a major way, but it does not eliminate 


eneepossıjbily, va 





V. ANSWERS TO QUESTIONS 


If one had conducted an analysis along the lines indicated, 
could the questions raised in Section IA now be answered? It is 
apparent that there can be no answers which hold universally. 
Every weapon system must be studied on its own merits in much 
detail. Thus, we should avoid institutional arrangements that 
dictate test and maintenance philosophy before all the facts are 
known or lead to reliability specifications which are difficult 
to change for over-all benefit as the program progresses. Based 
on the REB example considered herein, we can make some general 
assertions concerning the questions if we stipulate enough 
Fonda tons On seach conclusion: 

(1) There are certainly powerful inducements for decreeing 
that a wooden bomb be produced. Estimation of the present value 
of the cost of an involved test and maintenance activity over 
the service life of the weapon system will probably show up as 
a large sum whose avoidance looks very attractive. And the 


chance that any reliability payoff might be negative regardless 


of monetary cost if the wrong design alternatives or test procedures 


are selected is a discouraging outlook. The decision should 
depend on setting the marginal utility of average reliability 
equal to the marginal cost of obtaining it. If an agency finds 
the wooden bomb best on one program, it should not necessarily 
decree it as policy on dll other programs. “Cn the, other nana. 


neither should an agency decree maintenance activities because 
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Or arbitrary «policy. hnic latter possibility is secen tonbe 
likely where program responsibility is split between semi-autonomous 
development and logistics commands. The logistics command tends 
to plan extensive maintenance activities for some reliability 
improvement without a clear picture of the over-all cost-benefit 
Situation. The agency making decisions should have responsibilities 
which span the entire life of the weapon system. 

(2) Chapter III herein covered the analysis concerning 
Enem cure and frequency of tests, The alternatives are many 
ar eomplex, but external constraints of the system may in “actuality 
limit the choices severely. Tests in general will be done when 
tie RER. 1s dvdilable at little cost. The nature of the tests 
should be dictated by the attempt to insure a correct answer to 
ne question of good or bad, — But this 1s a tradeoff with Jimicias 
degradation from the test procedure. From the monitoring operations 
there is the byproduct of some information leading to forecast 
of the approach of the wearout period. This should probably not 
Re a significant {actor ar deciding the, trequeney of these system 
tests. This statement is made on the assumption that it takes 
a much more thorough intensive (probably destructive) examination 
to detect impending wearout conditions than would be efficient 
for a monitoring operation which had the purpose of detecting 
failures which have already occurred. The stockpile sampling 
program as a separate activity could more efficiently predict the 


approach of wearout. 


Sy 
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(3) The values postulated in our analysis would say that 
one should hedge against unexpected failure modes in conjunction 
with the wooden bomb concept and pay the cost for a removable 
functional device. This would not necessarily be true for a 
lower cost weapon or one where the logistic cost of replacement 
of the entire weapon were Smaller. 

(4) This thesis indicates several considerations for 
lowering a reliability goal previously set without proper considera- 
tion of all economic factors. Neglect of economic analysis seems 
to suggest likelihood of the reliability goal. being set too high. 
The many unknown factors and iterative calculations called for 
make proper decision seem very difficult, but in actuality there 
may be only a fairly small number of practical alternatives from 
which to choose. Again, a development agency with over-all 
program responsibility is suggested as a desirable institutional 
arrangement because of the necessity for authority to change 
reliability goals without undue administrative delay as new 
information becomes available. 

(S) The last question, whether to develop a functional 
device based on a different physical principle, is really not 
different from consideration of other design alternatives except 
for the higher uncertainty attendant to a research progranm cor 
a given system effectiveness, the present value of the cost of 
the two programs is compared. However, the use of arbitrary rules 
rather than rational economic reasoning could dictate the wrong 


alternative. For example, if an agency had decreed the wooden 





+ 
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bomb concept for the entire service life in conjunction with a 
strict minimum reliability specification, an electronic device 
might be ruled out on technical feasibility grounds even though 
its choice might be a better alternative if a few maintenance 
cycles were allowed. 
In summary, we have indicated in simple terms a rationale 
for the application of economic analysis to a very complex technical 
problem. The following quotation from Joan Robinson seems 


appropriate: 


The analysis can be extended to any degree of refine- 
ment, but the more complicated the question the more 
cumbersome che analysis. - In order to know dnythang ae 
is necessary to know everything, but in order to talk 
about anything it is necessary to neglect a great deal. [17] 





APPENDIX 1 


GENERALIZED LAGRANGE MULTIPLIER METHOD 
A. Background 


The method suggested in Chapter II for solving the problem 
of optimum allocation of reliability improvement activities is 
a simple application of the Generalized Lagrange Multiplier 
Method explained in reference [13] . The basic framework of 
the method will be outlined in this appendix in terms of the 
PODL mn hS thesis., 

The data for this problem would not normally be in the form 
of differentiable functions but a set of cost estimates corresponding 
to several discrete intensity levels of each activity. This use 
of Lagrange multipliers constitutes a technique whose goal is 
maximization cf the total reliability improvement subject to 
a cost constraint. The domain of the function to be maximized 
1s the Set of reliability improvements possible, enoosing- one 


intensity level from each improvement activity. 


B. Formulation 


In our problem we have set up four different activities of 
inact. todo “For cachj ve can Select dm intensinyi level 
which would by itself result in a reliability improvement of 
Ms san Mie ssetrol possible erraregie. consactedal 
all possible combinations of these activity levels. The over-all 


reliability improvement, X, from any strategy is called the payoff 
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function. Corresponding to the intensity level of each activity 
there is a cost, C, which pertains if that activity were the 
only one employed. The total cost, C, of any strategy is called 
the resource function. The problem to be solved is maximization 
of the payoff subject to a constraint on the resource. 

As a subclass of the general problem, our problem is called 
a cell or separable problem in that the activities are considered 
to be independent of each other (over the small range of variables 
in question) such that the over-all payoff is the sum of the 
individual payoffs, and the over-all cost is the sum of the 
individual costs. The problem to be solved in this case is to 
find a strategy, one intensity level from each activity, which 
maximizes the reliability improvement subject to a constraint 


en cost: 
Maximize: Kei ) X 


Subject to: Dac. =C. 


C. Main Theorem 


The main theorem of reference ES in our terminology and 


for only ome constreint»1s as follows. Given thar 


(1) All Lagrange multipliers, wu, are nonnegative 
real numbers 
(2) Strategy S* maximizes the unconstrained function 


ea. 


“ss 





yo 


then it follows that S* maximizes X over all strategies such 
mat CE COn 
This theorem says that for any choice of nonnegative u, il 


a maximum of the unconstrained Lagrangean function 


Ke Ee 


can be found, then the solution is a solution to the constrained 
maximization problem where the constraint is the cost expended 
in achieving the unconstrained solution. According to the theorem, 
one can simply choose an arbitrary set of nonnegative u's, find 
an unconstrained maximum of the modified payoff function, X =C, 
and one has as a result a solution to a constrained problem. 
Different choices of mu's lead to different cost levels. The 
method does not guarantee that an answer can be found, but asserts 
that if an answer can be found it will indeed be optimum. 

In applying the main theorem to the cell problem it is shown 
that maximizing 


As - ul. 
l l 


for each activity independently of strategy choices in other 
activities, and summing the payoffs and costs for each activity 
(for the strategy that maximized the Lagrangean for that activity); 
results in maximizing 2X. with cost constraint equal to ere 
both summations over the strategy produced by the procedure. 

The theorem says nothing about the manner in which one 
obtains the maxima of the unconstrained Lagrangean functions. 
In our case where we do not have analytic functions it cannot 
be done by finding zeroes of derivatives. It is done in this 
simple example by listing all discrete possibilities and picking 


the maximum result. 





APPENDIX 2 


ACTIVITIES FOR IMPROVEMENT OF INITIAL RELIABILITY 


From the categorization in Section ID of all processes for 
reliability improvement, four activities are chosen as particularly 
applicable to initial (when new) reliability. The four are 
discussed below as applied to the case of an electronic arming 
and fuzing device (AFD) in the re-entry body (REB) of a strategic 
missile. 

(1) Reduction of AFD Complexity 

The AFD was made complex to provide a level of accuracy in 
sensing height of burst (HOB) above target. The very nature 
of electronic device failure rate versus complexity then dictates 
a lower reliability than a less complex device. The HOB accuracy 
contributes to determination of a radius of effect (Rp) Ton 
warhead explosive yield to kill a target of given hardness. 
Accuracy in terms of the circular error probable (CEP) of the 
burst is also affected because of the interaction between HOB 
dispersion and the re-entry trajectory. Ro and. CEP together 
determine the on kill (Py) Tor a single target 


[Recep | . Thus the functional relations exist for 
Bee ae 
calculating opportunity costs due to decreased Px from lowering 
complexity if we assign a worth to the REB and also decide on how 


this value is divvied up among the units of Py of the basic design. 


Me 
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Sophisticated methods looking at effectiveness over a complete 
target complex may be dictated. In lowering complexity there will 
Peon sor beck ruing saying Cro the opportunity costs) in. pecuniary, 
costs of development and production, but they may not be too 
Significant in comparison. (It should be noted that increased 
complexity can result in higher reliability if the complexity 

1s required to overcome an enemy countermeasure environment. We 
are assuming that increased complexity is only for the purpose of 


improving performance - better accuracy, given no failure.) 


(2) Redundancy 

ine design Ope lone under thi ssactivaty inyo ve pur In entire 
functional channels in parallel with the basic series functional 
circuit or selected components or groups of components in parallel 
with others. Components with suspected high fallibility would of 
course. be selected tor redundancy. nel meire channel redundancy 
is normally a choice between single or dual because the marginal 
return in reliability rapidly becomes very small and may even go 
negative due to cross-channel failure paths. We are assuming 
here the channel or component is duplicated with another identical 
one. Consideration of using a different type functional circuit 
as a redundant one involves hedging against uncertainty in predicting 
reliability and will be discussed in Chapter IV. The major costs 
of this activity are likely to be the opportunity costs representea 
by the weight and space allocation robbed from the warhead which 
would result in lower explosive yield. Since R. is roughly 


E 
1/3 


proportional to W where W = yield of warhead, the 


opportunity cost can be calculated as done for activity #1. The 


an 
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pecuniary costs in this case would be additive rather than off- 
setting but probably not too significant. (Another possible 

cost is in the area of nuclear safety, the provision of low 
probability of an unwanted detonation, and should be mentioned. 

It is sometimes assumed that increased reliability means reduced 
safety because a series of functional safety devices would indeed 
imply reduced reliability compared to their simple removal. However, 
much can be done in the way of devices which serve both operating 
and safety functions, and it is by no means clear that a prolifera- 
tion of series elements will insure maximum safety. In any event 
an almost absolute safety criterion is enforced for any design 
option. Any differences in probability of unwanted detonation 
between different designs are essentially not calculable - the 
differences between very small numbers. The cost of an unwanted 
muclear detonation is unknown except to say it is unacceptably 
high. Significant costs for providing safety are difficult to 
separate from the other costs of development. For these reasons 


an estimate of costs involving safety will not be included.) 


(3) Provision for Integrated Test in Manufacture 

From the standpoint of efficiency in packaging the functional 
parts in the REB - where efficiency means allowing more weight 
and space allocation for the warhead and more freedom of design 
for the REB structure - it is generally better to split up the AFD 
and tuck it here and there to best utilize the available locations. 


But this splitting up means addition of cable runs with inherent 
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raul potentials sandea Very much NMOre Giltricule job Or cesting the 
AFD during development, evaluation, and qualification programs 

its opera tacnelcontigutetion TRuszre geanzrelsabı eye 

a design which is not Single unit, we can choose designs which 
come closer to being single unit. As in activity #2 the robbing 
of space and weight allocation will result in lower yield. The 
effect might even be severe enough to decrease accuracy due to 
limitations on REB structure design options which would influence 
aerodynamic characteristics during re-entry. In any event the 
opportunity costs due to reduced Px can be calculated. One would 
expect some offsetting savings in the test programs. Experience 
on earlier designs should enable engineers to make reasonable 
estimates of the AR to be gained from different degrees of movement 


toward a single unit design. 


(4) Manufacturing and Quality Control 
This activity would apply to a design resulting from any 
combination of intensity levels in the first three activities. 
Pe Would consis. or aetiens suchas: 
(a) Use of high reliability parts, attained by careful 
design, intensive controls during manufacture, extensive testing 
for statistical confidence in the design, and screening manufactured 
parts by complete testing of parameters. 
(b) Intensive process controls during manufacture 


aña Gual Icon trol tester er sence ergo em. 
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Thetcosts 01 thisractivity are the pecuniary eostsseorf äıtteren. 
intensity levels. Actually the cost for a given AR would be 
dependent on what combination of the first three activities was 
embodied in the design and program changes proposed. On the other 
hand, over a limited range of design and program changes, considering 
the C. versus X, relationship for this activity as independent of 

the other activities might not be a bad approximation, bearing 

in mind we are looking at limited changes to a basic program which 


already includes a considerable amount of this kind of activity. 





1O? 


DES 


LITERATURE CITED 


Myers, Richard H, Kam L. Wong, Harold M. Gordy, editors, 
Reliability Engineering for Electronic Systems. (New York: 
Wiley, 1964). 


ARTNC Research Corporation, William von Alven,; editor, 
Reliability Engineering. (Englewood Cliffs, New Jersey: 
Prentice-Hall, ane. 1964). 


"Reliability Stress and Failure Rate Data For Electronic 
Equipment", MIL-HDBK-217A. (Washington, D.C.: Department of 
Defense, 1965). 


Maren Marek Corporation, .D. E. Cotrell. Tr Ro Cagnlers 

E. W. Kimball, et al., "Dormant Operation and Storage Effects 
on Electronic Equipment and Part Reliability", Rome Air 
Development Center, Technical Report No. RADC-TR-67-307. 
Griffiss Air Force Base, New York: 1967. 


Brender, David M., "The Uncertainty of System Failure-Rate 
Exedietions o TELÊ Transactions on Relzabalnev, Volo Rico 
Re pp Scot TIG 7: 


Bowman, Edward H. and Robert B. Fetter, Analysis for Production 
Management. (Homewood, Illinois: Richard D. Irwin, Inc., 1961). 


Viner, Jacob, "Cost Curves and Supply Curves", in American 
Economic Association, Readings in Price Theory. (Homewood, 
eis Ro hard iD. MAN SS pe e: 
Reprinted from Zeitschrift fur National okonomie, Vol. III, 
DD) 26-46, Loses 


Cohen, Kalman J., and Richard M. Cyert, Theory of the Firm: 
Resource Allocation in a Market Economy. (Englewood Cliffs, 
New Jersey: Prentice-Hall, Inc., 1965). 

Liebhafsky, H. H., The Nature of Price Theory. (Homewood, 
Liiimgiss: “ae Dorsey Press, Tac: DES 


Knight, Frank H., Risk, Uncertainty and Profit. (New York: 
Sentry Press, Reprint, 1964). 


Friedman, Milton and L. J. Savage, "The Utility Analysis of 
Choices Involving Risk" in American Economic Association, 
Readings in Price Theory. (Homewood, Illinois: Richard D. 
Erwin, mos. 1952), pp. 57-96" "Reprinted trom tie Journal 
of Political Economy, Vol. LVI, pp. 279-304, 1948. 


78 





L23 


Se 


14, 


Eos 


29: 


17. 


TAS 


Retiro San. Probability and Prorit = À Stuoy.of Economic 
Behavior Along Bayesian Lines. (Homewood, Illinois: Richard D. 
en seiner. dos): 


Everett, Hugh, III, "Generalized Lagrange Multiplier Method 
for Solving Problems of Optimum Allocation of Resources", 
Operations Research, Vol. 11, pp. 399-417., 1963. 


Ferguson, Robert L., "No-Test, No-Maintenance Economics", 
IEEE Transactions on Aerospace Support Conference Procedures, 
Vol. AS-1, pp. 889-894, 1963. 


Samuelson, Paul A., Foundations in Economic Analysis.(New York: 
Atheneum, 1967). 


Weiss, George H., "Optimal Periodic Inspection Programs for 
Randomly Failing Equipment", Journal of Research of the 
National Bureau of Standards - B. Mathematics and Mathematical 
Biveles . VOL Co nov pb 22 E Cho. 


Kobinson, Joan, "Rising Supply Price”, in American Economic 
Association, Readangs in Price Theory. (Homewood, Illinois: 
Richard Dicc OS EP AA Reprinted inom 
Economica, New Series, Vol. Vill, p. 8, 1941. 


às 














thesG726 
Economic analysis of provision of reliab 


DUDLEY KNOX LIBRARY 





